CVE-2002-2106

CVE-2002-2106 describes a remote file inclusion vulnerability in WikkiTikkiTavi versions prior to 0.21. This flaw allows unauthenticated remote attackers to execute arbitrary PHP code by manipulating the TemplateDir variable, as demonstrated with conflict.php. The vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog and showing no active exploitation or community discussion, exploit code is publicly available via ExploitDB, suggesting a potential for future exploitation.